exasol-export

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses exapump CLI commands (e.g., exapump sql, exapump export, exapump profile) to manage data exports and database connections. These are standard tools for the Exasol environment and are used within their intended administrative scope.
  • [CREDENTIALS_SAFE]: The skill includes explicit security instructions to protect credentials. It warns the agent to:
  • Never cat or print ~/.exapump/config.toml because it contains clear-text credentials.
  • Mask credentials in command output and never repeat them in conversation.
  • Advise users to use exapump profile add without the --password flag to ensure passwords are provided via secure hidden prompts.
  • Use Exasol CONNECTION objects and ALTER CONNECTION for remote targets (S3, Azure, GCS) instead of embedding secrets directly in SQL statements.
  • [SAFE]: All external references for cloud storage targets (AWS S3, Azure Blob Storage, Google Cloud Storage) and protocols (FTP, SFTP, HTTP, HTTPS) are standard integrations for the Exasol database. The examples use safe placeholders like <access-key> and <session-token> rather than actual credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 04:31 PM
Security Audit — agent-trust-hub — exasol-export